NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
Medium Severity
Americas
Anguilla
Date OccurredMay 17, 202611:57 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedMay 17, 2026
Full Description
A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck.
The vulnerability, tracked